CVE-2026-66442

Subscriber Broken Access Control in YayPricing <= 3.5.6 versions.

Credits

K. Sorrachat | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/yaypricing/vulnerability/wordpress-yaypricing-plugin-3-5-6-broken-access-control-vulnerability?_s_id=cve